CISA Known Exploited Vulnerabilities
KEV additions — December 2022
9 CVEs entered the KEV catalog in December 2022.
Added December 29, 20222
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2018-18809 | TIBCO JasperReports Library Directory Traversal Vulnerability | 6.5 | 93.9 % | January 19, 2023 |
| CVE-2018-5430 | TIBCO JasperReports Server Information Disclosure Vulnerability | 8.8 | 41.4 % | January 19, 2023 |
Added December 14, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-42856 | Apple iOS Type Confusion Vulnerability | 8.8 | 0.2 % | January 4, 2023 |
Added December 13, 20225
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-26500ransomware | Veeam Backup & Replication Remote Code Execution Vulnerability | — | 5.9 % | January 3, 2023 |
| CVE-2022-26501ransomware | Veeam Backup & Replication Remote Code Execution Vulnerability | — | 4.3 % | January 3, 2023 |
| CVE-2022-27518 | Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability | 9.8 | 23.0 % | January 3, 2023 |
| CVE-2022-42475ransomware | Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability | 9.8 | 94.0 % | January 3, 2023 |
| CVE-2022-44698ransomware | Microsoft Defender SmartScreen Security Feature Bypass Vulnerability | 5.4 | 66.4 % | January 3, 2023 |
Added December 5, 20221
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2022-4262 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 6.4 % | December 26, 2022 |